๐Ÿงช
LAB
EXPERT

Chained Exploit: INSERT SQL Injection to Second-Order Stored XSS

UNSOLVED
๐Ÿ›ก๏ธ CSZone SecOps Portal
Scenario 16

๐ŸŽซ Enterprise Support & Incident Dispatch

Submit security compliance tickets, infrastructure maintenance requests, and vulnerability advisories. All standard tickets are ingested into the database with default low priority for triage.

๐ŸŽฏ Lab Objective:
Exploit the INSERT-based SQL injection vulnerability in the ticket registration form to poison the database. Escalate your ticket's priority and inject a Stored XSS payload that executes alert("cszone") when the executive compliance officer opens the Admin Compliance Queue.
Internal routing department tag (e.g. IT-INFRA, DEV-OPS, FINANCE).

Public Ticket Status (1)

๐Ÿ”„ Reset All Tickets

Standard ticket log overview. Detailed descriptions and executive audit reviews are strictly restricted to the Compliance Queue.

ID Submitter Department Assigned Priority Submitted At
#1 Infra SecOps IT-INFRA NORMAL 2026-10-20 21:36:14